search

stratosphereips / StratosphereTestingFramework

The stratosphere testing framework is mean to help in the researching and verification of the behavioral models used by the Stratoshpere IPS.
Other
50 stars 13 forks source link

stfm create #4

Open researcher110 opened 6 years ago

researcher110 commented 6 years ago

dear eldraco, I do all instructions in github page of stf.py and slips.py,then I have a problem. my problem is that I can't create stfm file from models that generated with stf.py how can create .stfm file from models generated?

best regards

researcher110 commented 6 years ago

Hi Dear, I can Solve Problem and It is working fine. Thanks

Mxrog commented 6 years ago

How did you manage to create a stfm file @researcher110 ? I 've done everything you said too and I can't find a way to create one.

researcher110 commented 6 years ago

hi Mxrog, excuse me because of delay on response on your post!

You can now see the labels created

CTU-Malware-Capture-Botnet-124-1: stf > labels -l
| 1 | From-Botnet-TCP-HTTP-CC-28 | 83-1 | ['10.0.2.105-201.175.17.35-8080-tcp']

The last step is to create the Markov Chain model for this specific label. CTU-Malware-Capture-Botnet-124-1: stf > markov_models_1 -g From-Botnet-TCP-HTTP-CC-28 And this can be confirmed listing the markov models 1 | 21 | 1 | From-Botnet-TCP-HTTP-CC-28 | False | -1 | 99,i,I,i,I,i,z+Z,I,i,

for further information follow the below link: https://stratosphereips.org/stratosphere-ips-generation-of-the-behavioral-models.html

Mxrog commented 6 years ago

@researcher110 thank you for your reply. I have done all of these you said but the output of markov_model is not exactly the same with .stfm files in the models directory. Is there a problem?